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(54) Method for verifying the expected postal security device in a postal security device 



(57) A PSD has a private key which is associated 
with a specific public key that is stored in the host PC. 
The host PC sends the PSD public key private key to the 
PSD. If the PSD determines that the received PSD pub- 
lic key corresponds to its private key, the system has 
determined that the expected PSD is connected to the 
Host system and the PSD is activated to accept postal 
value requests from the host PC. Additionally, a PSD 
state identification, such as a checksum of a PSD trans- 
action log file stored in the host may be verified by the 
PSD, which also has stored therein a PSD transaction 
log file. In this manner the PSD verifies that the PSD 
has performed all transactions with the host PC sending 
the checksum. Methods for verifying in the PSD that the 
expected host PC is coupled to the PSD mirrors the two 
embodiments for verifying the expected PSD. 



FIG, 1 



1U 

J 



DATA 
CENTER 



PSO 

10 



PSO , 
PUBLIC \— 
KEY 



5^L 



MANUFACTURER 


PSD 
10 


PSD 
PRIVATE 
KEY 


PSO 
PUBLIC 
KEY 



HOST PC 




y 




PSO 
PRIVATE KEY 


PSO 
PUBLIC 
KEY 




OfiXSUH 






ICSSAGE 
GENERATOR 


^22 


PSD ID 




CHECKSUM 



CM 
< 

CM 
CD 

CO 

o 

Q. 

Ill 

Primed by Xerox (UK) Business Services 
2.16.3/3.4 



1 



EP0 845 762 A2 



2 



Description 

The present invention relates generally to a system 
and method for postage metering security and, more 
particularly, to systems and methods for verifying 
authorized postal security devices. 

The Information-Based Indicia Program (IBIP) is a 
distributed trusted system proposed by the United 
States Postal Service (USPS). The IBIP is expected to 
support new methods of applying postage in addition to, 
and eventually in lieu of, ihe current approach, which 
typically relies on a postage meter to mechanically print 
indicia on mailpieces. The IBIP requires printing large, 
high density, two dimensional (2-D) bar codes on mail- 
pieces. The Postal Service expects the IBIP to provide 
cost-effective assurance of postage payment for each 
mailpiece processed. 

The USPS has published draft specifications for the 
IBIP. The INFORMATION BASED INDICIA PROGRAM 
(IBIP) INDICIUM SPECIFICATION, dated June 13, 
1996, defines the proposed requirements for a new ind- 
icium that will be applied to mail being processed using 
the IBIP. The INFORMATION BASED INDICIA PRO- 
GRAM POSTAL SECURITY DEVICE SPECIFICATION, 
dated June 13, 1996, defines the proposed require- 
ments for a Postal Security Device (PSD) that will pro- 
vide security services to support the creation of a new 
"information based" postage postmark or indicium that 
will be applied to mail being processed using the IBIP. 
The INFORMATION BASED INDICIA PROGRAM 
HOST SYSTEM SPECIFICATION, dated October 9, 
1996, defines the proposed requirements for a host sys- 
tem element of the IBIP. The specifications are collec- 
tively referred to herein as the "IBIP Specifications". The 
IBIP includes interfacing user (customer), postal and 
vendor infrastructures which are the system elements of 
the program. 

The user infrastructure, which resides at the user's 
site, comprises a postal security device (PSD) coupled 
to a host system. The PSD is a secure processor-based 
accounting device that dispenses and accounts for 
postal value stored therein. The host system may be a 
personal computer (PC) or a meter-based host proces- 
sor. Among the various requirements set forth in the 
Host System Specification is that the host system veri- 
fies that the coupled PSD is "the expected PSD". Con- 
ventional postage metering devices and recent digital 
metering devices, such as PostPerfect and Personal 
Post Office, both manufactured by the assignee of the 
present invention, do not include such verification. 
Thus, a method for achieving such verification is 
desired. 

U.S. Patent No. 5,510.992 discloses a method 
whereby the host PC verifies that a storage means that 
is coupled to the host PC and has postal value stored 
therein, is authorized for use with the host PC. The 
method comprises the steps of storing a unique identi- 
fier, such as a serial number, in the storage means 



when the storage means is filled with postal value, and 
sending the unique identifier to the host PC when post- 
age value is requested for dispensing. The host PC then 
verifies that the storage means is authorized for use 

5 with the host PC by confirming that the unique identifier 
retrieved from the storage device is the same as one 
stored in the host PC. Although such method verifies 
that the storage means is the expected storage device, 
the storage means is not a PSD because it is not a proc- 

ro essor-based accounting device that dispenses and 
accounts for postal value stored therein. Furthermore, 
the verification of the serial number in the host PC is 
subject to fraud. 

It has been found that the present invention pro- 

15 vides a more secure and reliable system and method for 
verifying the expected PSD is coupled to the host PC. It 
has further been found that the present invention pro- 
vides a secure and reliable system and method for veri- 
fying the expected host PC is coupled to the PSD. 

20 The present invention provides a secure and relia- 
ble method for verifying in the host system that the 
expected PSD is coupled to the host system. In accord- 
ance with the present invention, the PSD has a private 
key which is associated with a specific public key that is 

25 stored in the host PC. The host PC sends the PSD pub- 
lic key to the PSD. If the PSD determines that the 
received PSD public key corresponds to its private key, 
the system has determined that the expected PSD is 
connected to the Host system and the PSD is activated 

30 to accept postal value requests from the host PC. Addi- 
tionally, a PSD state identification, such as a checksum 
of a PSD transaction log file stored in the host may be 
verified by the PSD, which also has stored therein a 
PSD transaction log file. In this manner the PSD verifies 

35 that the PSD has performed all transactions with the 
host PC sending the checksum. A method for verifying 
that the expected host is coupled to the PSD mirrors the ^ 
method for verifying the expected PSD. 

Trie above and other objects and advantages of the 

40 present invention will be apparent upon consideration of 
the following detailed description, taken in conjunction 
with accompanying drawings, in which like reference 
characters refer to like parts throughout, and in which: 

45 Fig. 1 is a book diagram of a postage metering sys- 
tem in accordance with the present invention show- 
ing a process for storing keys in a host system and 
a PSD coupled thereto; 

Fig. 2 is a fbw chart showing an alternate process 
so for storing keys in a host system and a PSD cou- 
pled thereto; 

Fig. 3 is a flow chart of a preferred method for veri- 
fying the expected PSD is coupled to the host sys- 
tem; 

55 Fig. 4 is a flow chart of showing a method corre- 
sponding to that of Fig. 3 for verifying the expected 
host system; 

Fig. 5 is a flow chart of an alternate method for ver- 
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ifying the expected PSD is coupled to the host sys- 
tem; and 

Fig. 6 is a flow chart of showing an alternate 
method corresponding to that of Fig. 5 for verifying 
the expected host system. 

In describing the present invention, reference is 
made to the drawings, wherein there is seen system 
and methods for verifying the expected postal security 
device in a host system and conversely verifying the 
expected host system. Referring now to Fig. i, a post- 
age metering system, generally designated 10, includes 
a Host PC 20 coupled to a PSD 30, a Data Center 40 
and a manufacturer 50. The manufacturer 50 initializes 
PSD 30 with an identification number, such as PSD ID 
32, and a cryptographic key, such as PSD private key 
34. The manufacturer 50 also sends the PSD ID 32 and 
a cryptographic key corresponding to the key in the PSD 
30, such as PSD public key 36, to the Data Center 40. 
The Data Center 40 then sends the PSD ID 32 and the 
public key 36, to the Host PC 20. For the purpose of 
describing the present invention, the PSD private and 
public keys are stored in PSD 30 and Host PC 20 
respectively. It will be understood that a secret key 
shared by the Host PC and the PSD may be used in 
place of such key pair. 

The Host PC 20 and PSD 30 each include a micro- 
processor and memory (not shown). The Host PC 20 
further includes a message generator 22 for generating 
a message. The message may be a random number or 
may include data indicating status of the PSD, for exam- 
ple a checksum 24 of PSD transaction records stored a 
log files in Host PC 20. For the following description of 
the present invention checksums will be used. The PSD 
records stored in Host PC 20 correspond to PSD 
records stored in PSD 30 for each transaction by PSD 
30. For a more detailed description of such storage of 
PSD records see European Patent Publication Number 
0780808, assigned to the assignee of the present 
invention, and incorporated herein by reference. 

Referring now to Fig. 2, an alternate method for ini- 
tializing the PSD with a cryptographic key is shown. At 
step 100, Host PC 20 generates a secret key or a key 
pair. The key or key pair is stored in Host PC 20, at step 
105. Host PC 20 the sends the secret key or one of the 
keys of the key pair to PSD 30, at step 110. PSD 30 
stores the key received from Host PC 20, at step 115. 

Referring now to Fig. 3, a method is shown for veri- 
fying that the expected PSD 30 is coupled to Host PC 
20. At step 200, the Host PC sends the PSD public key 
stored in the Host PC to the PSD. At step 210, the PSD 
determines if the public key received is the public key 
corresponding to the PSD private key stored in the PSD. 
If not, then, at step 230, an error is flagged that the 
expected PSD is not coupled to the Host PC. If the pub- 
lic key received does correspond to the PSD private key 
in PSD 30, then, at step 240, the expected PSD has 
been verified and the PSD is activated for IBIP process- 



ing. 

Referring now to Fig. 4, it may be required that, in 
addition to verifying the expected PSD, the system ver- 
ify the expected Host PC. In the preferred embodiment 

5 of the present invention, such verification of the 
expected Host PC mirrors the process for verifying the 
expected PSD as set forth above. At step 300, the PSD 
sends the Host PC public key stored in the PSD to the 
Host PC. At step 310, the Host PC determines if the 

10 public key received is the public key corresponding to 
the Host PC private key stored in the Host PC. If not. 
then, at step 330, an error is flagged that the expected 
Host PC is not coupled to the PSD. If the public key 
received does correspond to the Host PC private key in 

75 Host PC 20, than, at step 340, the expected Host PC 
has been verified. 

Referring now to Fig. 5, an alternate method for ver- 
ifying the expected PSD is shown. At step 400, the Host 
PC generates a message. In accordance with the 

20 present invention, the message may be in the form of a 
checksum of a PSD transaction log stored in the Host 
PC or any other PSD state identification that corre- 
sponds to data also stored in the PSD. The Host PC 
encrypts the massage with the PSD public Key, at step 

25 405, and sends the message to the PSD, at step 41 0. At 
step 415, the PSD decrypts the received encrypted 
message, such as the checksum. At step 420, the PSD 
generates a checksum of the transaction log stored in 
the PSD (or other PSD state identification correspond- 

30 ing to the message generated by the Host PC). At step 
425. the PSD compares the decrypted checksum 
received with the checksum generated by the PSD. If 
the checksums are not the same, then an error is 
flagged, at step 430, indicating that there is a discrep- 

35 ancy between the PSD logs stored in the Host PC and 
the PSD. If the checksums are the same then, at step 
435, the PSD is activated for IBIP processing. 

Referring now to Fig. 6, an alternate method for the 
PSD verifying that the expected Host PC is coupled to 

40 the PSD is shown which mirrors the process for verify- 
ing the expected PSD as shown in Fig. 5. 

At step 500, the PSD generates a message in the 
form of a checksum of the PSD transaction log stored in 
the PSD or any other PSD state identification that corre- 

45 spends to data also stored in the Host PC. The PSD 
encrypts the massage with the Host PC public Key, at 
step 505, and sends the message to the Host PC, at 
step 510. At step 515, the Host PC decrypts the 
received encrypted message, such as the checksum. At 

so step 520, the Host PC generates a checksum of the 
PSD transaction log stored in the Host PC (or other 
PSD state identification corresponding to the message 
generated by the PSD). At step 525, the Host PC com- 
pares the decrypted checksum received with the check- 

55 sum generated by the Host PC. If the checksums are 
not the same, then an error is flagged, at step 530, indi- 
cating that there is a discrepancy between the PSD logs 
stored in the Host PC and the PSD. If the checksums 



3 



5 



EP0 845 762 A2 



6 



are the same then, at step 535, the Host PC has been 
verified as the expected Host PC. 

tt has been found that the present invention is suit- 
able for use with any security device that is coupled to a 
host system in an unsecured manner. For example, the 
present invention could be used for a certificate meter- 
ing system such as disclosed in European Patent Publi- 
cation Number 0762692, filed August 21, 1996, 
assigned to the assignee of the present invention and 
incorporated herein by reference. 

While the present invention has been disclosed and 
described with reference to specific embodiments 
thereof, it will be apparent, as noted above, that varia- 
tions and modifications may be made therein. It is, thus, 
intended in the following claims to cover each variation 
and modification, including a certificate metering sys- 
tem, that falls within the true spirit and scope of the 
present invention. 

Claims 

1 . A method for verifying that a postal security device 
(PSD) is the expected PSD for a host system, the 
method comprising the steps of: 

storing at least the private key of a crypto- 
graphic key pair in the PSD; 
sending from the host system to the PSD a first 
public key stored in the host system; and 
verifying in the PSD that the first public key 
received from the host system is the public key 
of the key pair. 

2. The method of claim 1 further comprising the step 
of: 

activating the PSD for transaction processing 
when the first public key is the public key of the 
key pair. 

3. A method for verifying that a postal security device 
(PSD) is the expected PSD for a host system, the 
method comprising the steps of: 

storing a cryptographic key pair in the PSD, the 
cryptographic key pair including a private key 
and a first public key; 

sending from the host system to the PSD at 
least a portion of a second public key stored in 
the host system; and 

verifying in the PSD that the portion of the sec- 
ond public key received from the host system 
corresponds to the first public key. 

4. The method of claim 3 further comprising the step 
of: 

activating the PSD for transaction processing 



when the first public key is the same as the sec- 
ond public key. 

5. A postage metering system comprising : 

5 

a host system having stored therein a first pub- 
lic key; 

a postal security device (PSD) coupled to said 
host system, said PSD having stored therein at 
10 least a private key of a key pair; and 

wherein said PSD includes means for 
verifying that said first public key is the public 
key of the key pair. 

is 6. A method for verifying that a postal security device 
(PSD) is the expected PSD and that the PSD has 
not completed transactions with any other host sys- 
tem, the method comprising the steps of: 

20 generating a first message in the host system, 

said first message representing a predeter- 
mined status of the PSD after the previous 
transaction between the host system and the 
PSD; 

25 encrypting the first message with an encryption 

key stored in the host system; 
sending the encrypted first message to the 
PSD; 

decrypting the encrypted first message with a 
30 decryption key stored in the PSD; 

generating a second message in the PSD, said 
second message representing the predeter- 
mined status of the PSD after the previous 
transaction between the host system and the 
35 PSD; and 

comparing the second message to the 
decrypted first message. 

7. The method of claim 6 further comprising the step 
40 of 

activating the PSD for transaction processing 
when the second message is the same as the 
decrypted first message. 

45 

8. The method of claim 6 wherein the first message 
generated includes data indicating status of the 
PSD based on PSD transaction records stored in 
the host system. 

50 

9. The method of claim 1 or 3 or 6 wherein the host 
system is a personal computer. 

10. The method of claim 6 wherein "the first and second 
55 identification numbers include at least one of a 

checksum, control sum, ascending register, 
descending register and random number from the 
previous transaction. 
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11. The system of claim 6 wherein the decryption key 
and encryption key are identical. 

12. The system of claim 6 wherein the decryption key 
and the encryption key are different 5 

1 3. The system of claim 6 wherein the decryption key is 
a private key of a key pair and the encryption key is 
a public key of the key pair. 

10 

14. The method of claim 8 wherein the data indicating 
status of the PSD is a checksum of PSD transaction 
records. 

15. A method for verifying that a postal security device 75 
(PSD) is the expected PSD for a host system and 
that the host system is the expected host system for 
the PSD, the method comprising the steps of: 

storing at least a first private key of a first cryp- 
tographic key pair in the PSD; 
storing at least a second private key of a sec- 
ond cryptographic key pair in the host system; 
sending from the host system to the PSD a 
public key stored in the host system; 
verifying in the PSD that the public key stored 
in the host system is a first public key of the first 
key pair; 

sending from the PSD to the host system a 
public key stored in the PSD; and 
verifying in the host system that the public key 
stored in the PSD is a second public key of the 
second key pair; 

1 6. The method of claim 1 5 further comprising the step 35 
of: 

activating the PSD for transaction processing 
when the public key stored in the host is the 
public key of the first key pair and the public key 40 
stored in the PSD is the public key of the sec- 
ond key pair. 



45 



50 



55 



25 



5 



EP0 845 762 A2 



FIG. 1 



10 




50 



MANUFACTURER 


PSO 
10 


PSO 
PRIVATE 
KEY 


PSO 
PUBLIC 
KEY 



34 



36 



3G- 



20 



HOST PC 




* 

Jf 

PSD 

PRIVATE KEY 


PSD 
PUBLIC 
KEY 




CHECKSUM 




MESSAGE 
GENERATOR 


X.22 


PSD 10 
CHECKSUM 



Lr 30 

■34 

-32 
-38 



FIG. 2 



HOST PC 
FIRST INSTALLATION 



PC GENERATES 
SECRET KEY 
(OR KEY PAIR) 



100 



PSD 



SAVE KEY 
(OR KEY PAIR) 



105 



SENO KEY (OR 
ONE OF KEY PAIR) 
TO PSO 



110 




6 



EP 0 845 762 A2 



200 





FIG. 3 




HOST PC 


PSD 

1 %JU 




VERIFY THAT PUBLIC 


SEND PSO 
PUBLIC KEY 
TO PSD 




KEY RECEIVED 
FROM HOST PC IS 
THE PUBLIC KEY 

FOR THE PSD 







210 




ACTIVATE PSD 
FOR IBIP 
PROCESSING 



FIG. 4 



HOST PC 



PSD 



310 



VERIFY THAT PUBLIC 
KEY RECEIVED 
FROM PSD IS 
THE PUBLIC KEY 
FOR THE HOST 



SEND HOST 
PUBLIC KEY 
TO HOST PC 



300 




340 



HOST VERIFIED 
FOR PROCESSING 
INDICIUM 



7 



EP 0 845 762 A2 



FIG. 5 



400 



HOST PC 



GENERATE CHECKSUM 
OF PSD TRANSACTION 
LOG STORED IN HOST PC 



PSD 



405 



ENCRYPT CHECKSUM 
WITH PSD. PUBLIC 
KEY 



410 



SEND ENCRYPTED 
CHECKSUM TO 
PSD 



DECRYPT WITH PRIVATE 
KEY TO OBTAIN CHECKSUM 
RECEIVED FROM HOST 


1 





415 



GENERATE CHECKSUM OF 
PSO TRANSACTION LOG 
STORED IN PSD 



4?0 



435 




ACTIVATE PSD FOR 
IBIP PROCESSING 



8 




EP 0 845 762 A2 



FIG. 6 



nuoi ri 



515 



DECRYPT WITH HOST PRIVATE 
KEY TO OBTAIN CHECKSUM 
RECEIVED FROM PSD 



PSD 



GENERATE CHECKSUM 
OF PSD TRANSACTION 
LOG STORED IN PSD 



± 



ENCRYPT CHECKSUM 
WITH HOST PUBLIC 
KEY 



SEND ENCRYPTED 
CHECKSUM TO 
HOST PC 



S 



500 



505 



510 



520 



GENERATE CHECKSUM OF 
PSD TRANSACTION LOG 
STORED IN HOST 



555 



HOST VERIFIED 
FOR PROCESSING 
INDICIUM 




9 



(19) 



(12) 



Europaisches Patentamt 
European Patent Office 
Office europ&n des brevets (1 1 ) EP 0 845 762 A3 

EUROPEAN PATENT APPLICATION 



(88) 


Date of publication A3: 


(51) Int. CI. 7 : G07B 17/00 




11.10.2000 Bulletin 2000/41 




(43) 


Date of publication A2: 






03.06.1998 Bulletin 1998/23 




(21) 


Application number: 97120461.5 




(22) 


Date of filing: 21.11.1997 




(84) 


Designated Contracting States: 


* irQiuery, riuuer i m. 


AT BE CH DE DK ES Fl FR GB GR IE IT LI LU MC 


Danbury, Connect. 06811 (US) 




NL PT SE 


• Rvan Frederick W Jr 




Designated Extension States: 


Oxford, Connect. 06478 (US) 




AL LT LV MK RO SI 


(74) Representative: 






(30) 


Priority: 21.11.1996 US 754568 


Avery, Stephen John et al 


Hoffmann Eitle, 


(71) 


Applicant: PITNEY BOWES INC. 


Patent- und Rechtsanwaite, 




Stamford, Connecticut 06926-0700 (US) 


Arabellastrasse 4 






81925 Munchen (DE) 


(72) 


Inventors: 






Pitchenik, David E. 






Fairfield, Connect. 06430 (US) 





(54) Method for verifying the expected postal security device in a postal security device 
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with a specific public key that is stored in the host PC. 
The host PC sends the PSD public key private key to the 
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Host system and the PSD is activated to accept postal 
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